VULNERABILITY INTELLIGENCE

CVE-2026-10520

CVSS score10 CRITICAL
EPSS probability99.91%
CISA KEVKnown exploited vulnerability
Published2026-06-09
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Ivanti Sentry OS Command Injection Vulnerability

Vendor / product: Ivanti / Sentry

Description

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Weakness classification

  • 3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-78

Primary references